Cce-interact » Interact : Security Vulnerabilities, CVEs,
Cross-site request forgery (CSRF) vulnerability in Interact 2.4.1 allows remote attackers to hijack the authentication of super administrators for requests that create super administrator accounts.
Max CVSS
6.8
EPSS Score
0.21%
Published
2008-11-03
Updated
2018-10-11
SQL injection vulnerability in spaces/emailuser.php in Interact 2.4.1 allows remote attackers to execute arbitrary SQL commands via the email_user_key parameter.
Max CVSS
6.8
EPSS Score
0.38%
Published
2008-11-03
Updated
2018-10-11
Multiple directory traversal vulnerabilities in help/help.php in Interact Learning Community Environment Interact 2.4.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) module and (2) file parameters.
Max CVSS
7.5
EPSS Score
2.55%
Published
2008-07-30
Updated
2018-10-11
3 vulnerabilities found